Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
File: FpjfAwCqteKm8ax45ZPsyXQNqts.mft (raw, json)
Hash identifier: IcYc/ytorVRO+smRo3tdxsbXcnDibTlxq/ZYoe+W0kk=
Subject key identifier: DE:9B:C7:B3:48:E5:12:F4:A9:B5:7F:DF:CF:22:A9:62:AE:33:C6:10
Authority key identifier: 16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB
Certificate issuer: /CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
Certificate serial: 0196561310CBBF04F669F981F8E8BB1F670C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
Manifest number: 0809
Signing time: Mon 21 Apr 2025 02:00:12 +0000
Manifest this update: Mon 21 Apr 2025 02:00:12 +0000
Manifest next update: Tue 22 Apr 2025 02:00:12 +0000
Files and hashes: 1: FpjfAwCqteKm8ax45ZPsyXQNqts.crl (hash: DRwG2y9Hql+e2UXnm9xjvwB8e5UtqQUQew74dZtRF9M=)
2: IUfWM-T8xAGUnehJbHrihlR8Ip4.roa (hash: +ZYqqzAxCIjpw2v4zvSgH/2R+ZjJqO0o/ztNO/Ll//g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:10:cb:bf:04:f6:69:f9:81:f8:e8:bb:1f:67:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
Validity
Not Before: Apr 21 02:00:12 2025 GMT
Not After : Apr 22 02:00:12 2025 GMT
Subject: CN=de9bc7b348e512f4a9b57fdfcf22a962ae33c610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cc:37:91:bf:4d:66:b3:a0:14:76:c0:29:49:
e4:b1:96:87:b5:a8:53:53:24:7c:dc:15:63:cd:3b:
5e:b1:d0:04:25:cc:8b:bb:43:18:64:c6:29:c7:29:
96:73:e1:ff:c5:5d:90:ca:d8:50:03:b8:a9:cd:3c:
0a:6c:f5:72:de:68:37:66:ab:36:e8:48:46:69:a4:
83:4d:0c:40:ee:5c:88:9a:92:ca:c5:98:c0:74:36:
03:d2:9c:bd:0b:8b:5f:da:cb:ec:fb:21:02:d1:45:
21:c1:cd:c4:58:5f:c7:1e:0e:e9:2a:da:f9:bf:0d:
00:cd:11:f7:02:31:4b:61:4b:45:d5:85:f1:e3:d4:
4e:7d:17:c4:ea:3f:05:cb:ee:e3:df:f6:e4:76:34:
88:fe:78:67:ac:f5:33:76:38:e5:f0:cd:65:7e:3f:
1b:89:67:b8:d2:ab:d1:0c:bc:17:41:90:51:3b:76:
ef:6a:a5:19:bf:40:e8:be:6a:11:2a:6c:d4:99:55:
de:d3:6b:73:ca:2c:12:31:39:f5:88:ce:1c:31:d4:
ca:50:cc:6e:91:b1:3a:a1:03:20:2b:03:be:75:d0:
bb:ce:d5:90:e4:57:dc:a5:14:d9:b5:65:1a:a9:67:
8b:71:31:22:5c:94:ed:f5:b6:d0:da:e9:ed:05:45:
71:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9B:C7:B3:48:E5:12:F4:A9:B5:7F:DF:CF:22:A9:62:AE:33:C6:10
X509v3 Authority Key Identifier:
keyid:16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b3:45:11:94:ae:50:23:aa:06:ba:78:77:a2:14:4a:fd:63:
8d:2e:37:b5:f0:f1:c5:c1:5e:d7:a1:fa:99:89:39:82:c4:b8:
03:a1:ec:44:7a:5f:71:58:ac:4c:77:e8:88:c2:75:aa:10:e4:
77:1e:56:61:85:3f:e3:f0:67:3e:ae:b5:2b:ac:38:6d:71:57:
7e:07:14:20:93:85:41:cb:3a:5a:dd:66:28:fc:cb:08:c9:68:
fd:1c:1e:0d:e8:da:1f:11:92:c7:d2:bb:2e:59:78:a2:ea:b6:
18:2b:ee:be:76:6a:7a:eb:75:c6:d5:38:5d:c7:f7:b0:38:2d:
c8:62:28:dc:c1:d3:5d:5b:1a:c5:09:78:b4:a9:9c:0b:74:3d:
03:c9:ab:37:51:78:82:b0:39:ab:b1:8a:78:29:10:40:27:e1:
d3:8e:77:7b:f3:73:6f:09:09:f0:93:b4:53:5c:0f:bf:d1:9c:
b1:55:2b:6e:70:68:14:b4:91:9a:2f:5c:9a:77:28:6f:71:21:
32:d6:f2:6a:65:a1:b8:bf:9a:f5:7f:16:6e:a5:ba:13:11:d0:
26:93:e6:f3:b6:a7:ee:b2:b3:4f:92:5b:55:17:7f:b7:84:82:
f7:9e:9a:0f:73:89:f8:82:ec:41:18:f3:c3:d3:24:f0:4b:7e:
96:78:b5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:52:20 2025 by rpki-client